Table of Contents

Assign permission sets

The shipped SwissSalary permission sets control which tables and processes a user may run. System or payroll administration assigns them in Business Central—in addition to the profile and the allocation group filter. Set up the sets when you create users and when roles change, before someone productively runs payroll or changes employee data.

The permission sets are listed by their role ID, as you assign them in Business Central.

Prerequisites

  • The user exists in Business Central.
  • You have administrative rights to assign permission sets.
  • The profile matches the task. Profile and permission set don't replace each other.

Assignable permission sets

Permission set (role ID) Purpose
SwS Login Sign in and get basic access to SwissSalary.
SwS Read Read employee data.
SwS Process Edit employees and run payroll.
SwS Setup Administer the SwissSalary module, including user setup.
SwS Setup Light Administer the SwissSalary module without user setup.
SwS Posting Post payroll runs.
SwS Salary Type Edit Edit salary types.
SwS MSS Use Manager Self Service.
SwS HR Process Edit HR data in Dynamics 365.
SwS HR Read Read HR data in Dynamics 365.
SwS HR Setup Administer the HR module in Dynamics 365.
SwS Budget Process Enter and process budget.
SwS Budget Read Read budget data.
SwS Budget Setup Administer the budget module.
SwS KLE Process Edit and process KLE cases.
SwS KLE Read Read KLE data.
SwS PayRaise Process Edit and process pay raises.
SwS PayRaise Read Read pay raise data.
Hinweis

Sets such as SwS Base Setup, SwS Indirect User Setup, SwS Translations, and SwS Loc Translations aren't intended for direct assignment. Assign only the sets in the table above.

Combine sets for the role

  1. Open the user card in Business Central and assign the permission sets.
  2. Give payroll specialists at least SwS Process; add SwS Posting for posting.
  3. Give payroll administration SwS Setup when they also maintain user setup; otherwise SwS Setup Light.
  4. Give department managers SwS MSS together with the SwissSalary Manager Self Service profile.
  5. Give budget, KLE, or pay-raise roles the related Process set, or only the Read set when the person should only read.
  6. Check the allocation group filter. Permissions without a filter show too many groups; a filter without permissions doesn't open the pages.

Good to know

  • You assign only SwS Login—employees and payroll remain unusable.
  • You confuse SwS Setup with SwS Setup Light—user setup is then open or blocked without you noticing.
  • You assign the SwissSalary Manager Self Service profile without the SwS MSS set—the manager view is missing or stays empty.
  • You try to assign non-assignable sets such as SwS Base Setup manually—administration belongs in the assignable sets in the table.

See also